Matters Browser Agent
Corporate Data-Movement Telemetry for Managed Browsers
Records where sensitive company data travels across SaaS, file transfers, and AI tools — without blocking workflows, reading passwords, or harvesting credentials. Deployed exclusively via MDM policy to storage your organisation owns.
Package & Fleet Specs
- Manifest
- Chrome MV3 / Firefox MV3
- Version
- 0.1.0
- Target Browsers
- Chrome, Edge, Firefox
- Distribution
- Managed Policy (MDM/GPO)
- Execution Mode
- Observational (Fail-Open)
- Data Controller
- Deploying Organisation
The 4 Architecture Guarantees
Engineered from first principles to balance comprehensive corporate DLP with strict employee privacy.
Zero Interruption (Fail-Open)
Does not block, cancel, delay, or modify web traffic or user actions. The blocking execution path is completely absent from the source code. Uploads, prompts, and navigations proceed with zero latency penalty.
Client-Side Credential Immunity
Credential-shaped values (passwords, TOTP one-time codes, private keys, JWTs, and API keys) are detected and reduced to non-reversible salted hashes. Plaintext secrets are never emitted or transmitted.
Customer-Sovereign Ingest
Telemetry streams directly via HTTPS to endpoints and storage infrastructure that the customer controls (e.g. AWS S3, Athena, or enterprise SIEM). Matters AI never receives, stores, or accesses employee data.
100% Policy-Driven
Completely inert upon installation. The agent activates only when an administrator provides a cryptographically verified JSON managed policy (storage.managed) via enterprise MDM or Google Workspace.
Telemetry Matrix
Transparent demarcation between observable corporate movement and inviolable privacy protections.
What It Records
Enabled only when configured by administrator policy
File Uploads & Downloads
Filename, size, MIME type, SHA-256 cryptographic hash, and destination host or local save path.
✓ File contents are never inspected or transmitted.Clipboard Operations
Cut, copy, and paste actions occurring on enterprise-managed devices.
✓ Credential patterns are salted-hashed only; content never sent.Navigation Context
Top-level domain and URL navigations to uncover sanctioned and unsanctioned SaaS services.
✓ Sub-resource requests and internal page elements are omitted.GenAI Prompt Telemetry
Prompts submitted to named AI assistants (ChatGPT, Claude, Gemini) for AI-governance compliance.
✓ Storage vs ephemeral evaluation is an administrator-controlled switch.Principal & Session Context
Work email attribution (via identity API), device identifier, and originating tab session ID.
✓ No OAuth tokens requested; tokens discarded after identity parsing.Health & Telemetry Coverage
Periodic heartbeat verifying service worker health, queue persistence, and coverage status.
✓ Local event queue persists offline for up to 3 days without data loss.What It Never Records
Immutable code properties — cannot be overridden by policy
No Keystroke Logging or Screenshots
Contains no keylogger, no screen capture, and no full-page DOM harvesting mechanism.
No Password or Credential Capture
Password-manager autofills, TOTP codes, and private keys are withheld by heuristic filters.
No Bearer Token Emission
Identity is parsed from unauthenticated claims; token signatures and scopes are immediately discarded.
No Site-Wide Body Inspection
Request bodies are inspected solely at the 3 named AI endpoints to avoid touching login forms.
No Blocking or Throttling
Never acts as a traffic choke-point. Fail-open architecture guarantees seamless user productivity.
No Transmission to Matters AI
Telemetry egresses strictly to customer-owned storage endpoints configured in managed policy.
Fleet Deployment & Policy Schema
Pushed silently across corporate devices via Google Workspace, Microsoft Intune, JumpCloud, or Jamf.
Zero Config without Administrator Policy
Upon install, the extension checks chrome.storage.managed. If the administrator policy payload is absent or lacks an ingest endpoint, the extension remains completely inert.
Supported MDM Providers
- Google Workspace Admin Console (Chrome Enterprise)
- Microsoft Intune / Group Policy Objects (GPO)
- JumpCloud MDM & Device Management
- Jamf Pro / Apple MDM (macOS fleet)
{
"ingest_endpoint": "https://telemetry.corp.example.com/v1/ingest",
"auth_token": "CORP_ENCRYPTED_INGEST_KEY",
"collectors": {
"file_transfers": true,
"clipboard": true,
"navigation": true,
"genai_prompts": true
},
"genai_retention": "evaluate_only",
"suppress_domains": [
"*.internal.corp",
"vault.internal",
"payroll.adp.com"
],
"batch_interval_ms": 30000,
"max_queue_items": 1000
}Declared Permissions & Audit Justifications
Every permission declared in manifest.json maps to an explicit, verifiable enterprise capability.
Holds the administrator's managed configuration and local event queue across service worker sleeps, with offline persistence up to 3 days.
Observes top-level page navigations to detect outbound data paths and unsanctioned SaaS usage.
Observes HTTP request metadata for upload detection. Used strictly in observational mode (never webRequestBlocking).
Extracts filename, size, MIME type, and local destination path for corporate download auditing.
Dynamically registers and unregisters content scripts so an administrator's suppress_domains list takes effect in real-time.
Reads the managed profile's work email to attribute events to an employee. No OAuth token is requested and no Google API is called.
Transparent, Observable, Sovereign.
Read our full legal disclosure, explore customer-managed integration patterns, or connect with our engineering team for enterprise pilots.